This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xj89a7XV8uEcsFW8mhNqzZenDrY.roa File: xj89a7XV8uEcsFW8mhNqzZenDrY.roa (raw, json) Hash identifier: SSD+DWbrA60gCtQdX0pc0/0arOUyS2iRhgGN0QQGu94= Subject key identifier: C6:3F:3D:6B:B5:D5:F2:E1:1C:B0:55:BC:9A:13:6A:CD:97:A7:0E:B6 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C76CE3DC7EED39E816ECBC0ADE488B Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xj89a7XV8uEcsFW8mhNqzZenDrY.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25070 IP address blocks: 81.15.246.0/24 maxlen: 24 195.136.174.0/24 maxlen: 24 195.136.180.0/23 maxlen: 23 195.136.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:e3:dc:7e:ed:39:e8:16:ec:bc:0a:de:48:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c63f3d6bb5d5f2e11cb055bc9a136acd97a70eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:86:2b:1e:79:3a:db:77:f3:fe:0d:82:0a: 38:e4:b5:71:f0:bc:19:08:d2:34:54:a3:0d:ec:c7: d5:8b:92:cb:42:b5:ba:e3:8f:f0:10:de:c6:b8:41: fc:76:e9:56:bf:80:f6:7b:78:84:4a:46:7d:53:6e: af:fe:5e:80:24:a6:02:17:c8:03:db:50:bd:2d:68: 8b:00:1c:f2:7e:e6:73:bd:fa:86:98:af:91:98:13: 6b:f8:8f:53:70:31:60:bd:a4:f6:c8:47:6f:de:6a: ee:e2:df:55:38:40:3c:38:9c:a2:d1:bb:e6:d7:a7: 8c:6a:77:51:f6:63:19:58:73:94:63:19:d9:fa:e1: d9:2f:34:3e:78:02:ad:ff:ba:80:bf:1a:98:da:ff: d9:b2:f0:23:b4:3b:f5:14:03:45:5e:05:3b:e9:ad: ea:54:33:20:10:8e:ea:9d:57:5c:c2:e0:be:2f:e0: e6:68:bb:17:cb:da:18:b5:cb:84:13:68:15:c7:8f: 37:1b:71:a8:22:7d:46:1d:34:ec:12:88:52:83:33: 3d:1a:d9:42:89:dc:ad:d4:2a:e2:f4:29:b6:40:40: e3:03:d5:66:6e:fb:30:d6:99:ed:1f:af:07:60:74: 51:9d:8a:d2:d2:0d:e9:50:75:b9:e8:74:ac:d3:59: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3F:3D:6B:B5:D5:F2:E1:1C:B0:55:BC:9A:13:6A:CD:97:A7:0E:B6 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xj89a7XV8uEcsFW8mhNqzZenDrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.246.0/24 195.136.174.0/24 195.136.180.0/22 Signature Algorithm: sha256WithRSAEncryption 94:21:6b:50:11:ac:18:e4:65:10:0f:bf:f7:54:cd:3b:45:a6: 98:05:55:68:14:89:62:5c:cf:42:2a:cd:05:b7:6b:ce:ab:84: 7e:2f:f1:ba:c3:5d:76:ae:fa:e5:02:33:35:92:1f:98:c4:96: f1:b9:c8:bc:72:49:71:1a:1a:21:ae:75:a6:2f:fe:ff:cf:f3: cb:0d:fb:5b:d9:14:1d:bb:a0:e9:74:6d:68:13:ad:e4:df:b4: 80:3a:0c:d2:c5:2c:f0:9e:8a:ab:7c:f2:18:fa:10:2c:51:54: 91:6f:f3:49:da:7b:ae:31:f6:01:06:27:ca:e9:d3:b8:c6:8c: 3b:55:30:6a:93:bd:96:b8:4e:62:aa:2a:b3:e2:b2:24:c4:e1: c5:fb:c8:d2:9a:94:7e:6c:02:a6:27:ca:01:55:57:a7:c2:35: a8:60:dd:d1:11:4b:37:c3:a2:40:8a:bd:71:f5:a9:ce:ab:1b: 3d:0b:eb:26:d7:e1:d4:d1:44:dc:21:6f:a8:b6:42:d6:fe:38: 07:04:8c:6c:df:3e:a2:4f:27:6d:ea:75:1e:40:9e:87:e2:1f: c8:d2:77:1b:59:b1:a6:88:6f:a1:ea:3a:b4:64:46:6d:f4:71: 6a:b6:00:3a:53:1e:93:b5:c7:ac:26:bf:21:99:9e:2f:0f:81: ec:6f:42:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x2zj3H7tOegW7LwK3kiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjNmM2Q2YmI1ZDVmMmUxMWNiMDU1YmM5YTEzNmFjZDk3YTcwZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+CGKx55Ott38/4Nggo45LVx8LwZ CNI0VKMN7MfVi5LLQrW644/wEN7GuEH8dulWv4D2e3iESkZ9U26v/l6AJKYCF8gD 21C9LWiLABzyfuZzvfqGmK+RmBNr+I9TcDFgvaT2yEdv3mru4t9VOEA8OJyi0bvm 16eMandR9mMZWHOUYxnZ+uHZLzQ+eAKt/7qAvxqY2v/ZsvAjtDv1FANFXgU76a3q VDMgEI7qnVdcwuC+L+DmaLsXy9oYtcuEE2gVx483G3GoIn1GHTTsEohSgzM9GtlC idyt1Cri9Cm2QEDjA9Vmbvsw1pntH68HYHRRnYrS0g3pUHW56HSs01nT3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMY/PWu11fLhHLBVvJoTas2Xpw62MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEveGo4OWE3WFY4dUVjc0ZXOG1oTnF6WmVuRHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUQ/2AwQA w4iuAwQCw4i0MA0GCSqGSIb3DQEBCwUAA4IBAQCUIWtQEawY5GUQD7/3VM07RaaY BVVoFIliXM9CKs0Ft2vOq4R+L/G6w112rvrlAjM1kh+YxJbxuci8cklxGhohrnWm L/7/z/PLDftb2RQdu6DpdG1oE63k37SAOgzSxSzwnoqrfPIY+hAsUVSRb/NJ2nuu MfYBBifK6dO4xow7VTBqk72WuE5iqiqz4rIkxOHF+8jSmpR+bAKmJ8oBVVenwjWo YN3REUs3w6JAir1x9anOqxs9C+sm1+HU0UTcIW+otkLW/jgHBIxs3z6iTydt6nUe QJ6H4h/I0ncbWbGmiG+h6jq0ZEZt9HFqtgA6Ux6TtcesJr8hmZ4vD4Hsb0IN -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:05 2026 by rpki-client